CVE-2024-28013

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Use of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN MR02LN, WG1810HP(JE) and WG1810HP(MF) all versions allows a attacker to change settings via the internet.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-330

Affected software

VendorProductVersions
NEC CorporationWG1800HP4all versions
NEC CorporationWG1200HS3all versions
NEC CorporationWG1900HP2all versions
NEC CorporationWG1200HP3all versions
NEC CorporationWG1800HP3all versions
NEC CorporationWG1200HS2all versions
NEC CorporationWG1900HPall versions
NEC CorporationWG1200HP2all versions
NEC CorporationW1200EX(-MS)all versions
NEC CorporationWG1200HSall versions
NEC CorporationWG1200HPall versions
NEC CorporationWF300HP2all versions
NEC CorporationW300Pall versions
NEC CorporationWF800HPall versions
NEC CorporationWR8165Nall versions
NEC CorporationWG2200HPall versions
NEC CorporationWF1200HP2all versions
NEC CorporationWG1800HP2all versions
NEC CorporationWF1200HPall versions
NEC CorporationWG600HPall versions
NEC CorporationWG300HPall versions
NEC CorporationWF300HPall versions
NEC CorporationWG1800HPall versions
NEC CorporationWG1400HPall versions
NEC CorporationWR8175Nall versions
NEC CorporationWR9300Nall versions
NEC CorporationWR8750Nall versions
NEC CorporationWR8160Nall versions
NEC CorporationWR9500Nall versions
NEC CorporationWR8600Nall versions
NEC CorporationWR8370Nall versions
NEC CorporationWR8170Nall versions
NEC CorporationWR8700Nall versions
NEC CorporationWR8300Nall versions
NEC CorporationWR8150Nall versions
NEC CorporationWR4100Nall versions
NEC CorporationWR4500Nall versions
NEC CorporationWR8100Nall versions
NEC CorporationWR8500Nall versions
NEC CorporationCR2500Pall versions
NEC CorporationWR8400Nall versions
NEC CorporationWR8200Nall versions
NEC CorporationWR1200Hall versions
NEC CorporationWR7870Sall versions
NEC CorporationWR6670Sall versions
NEC CorporationWR7850Sall versions
NEC CorporationWR6650Sall versions
NEC CorporationWR6600Hall versions
NEC CorporationWR7800Hall versions
NEC CorporationWM3400RNall versions

References

Timeline

Published
Mar 28, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-280149.8Stack-based Buffer Overflow vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HCVE-2024-280159.8Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WGCVE-2024-280166.0Improper Access Controlvulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WGCVE-2024-280208.0A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privilegedCVE-2024-280217.4A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an aCVE-2024-280226.5A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authenticCVE-2024-280235.7A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or functionality to unintCVE-2024-280244.1A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource that might be accessibCVE-2024-280257.2Three OS command injection vulnerabilities exist in the web interface I/O configuration functionality of MC Technologies MC LR Router 2.10.5CVE-2024-280267.2Three OS command injection vulnerabilities exist in the web interface I/O configuration functionality of MC Technologies MC LR Router 2.10.5CVE-2024-280277.2Three OS command injection vulnerabilities exist in the web interface I/O configuration functionality of MC Technologies MC LR Router 2.10.5CVE-2024-280287.5Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially e
CVE-2024-28013: Medium severity, CVSS 5.3 | Vulnix